Changelog updates & fixes

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron 2021-12-14 15:57:17 +01:00
parent 831cf48abf
commit 1ffa6a538a

View file

@ -1,6 +1,6 @@
mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS x.x.x branch released xxxx-xx-xx
= mbed TLS 3.1.0 branch released 2021-12-17
API changes
* New error code for GCM: MBEDTLS_ERR_GCM_BUFFER_TOO_SMALL.
@ -47,7 +47,7 @@ Features
Currently only 13-byte long IV's are supported.
For decryption a minimum of 16-byte long input is expected.
These restrictions may be subject to change.
* Add new API mbedtls_ct_memcmp for constant time buffer comparison.
* Add new API mbedtls_ct_memcmp for constant time buffer comparison.
* Add functions to get the IV and block size from cipher_info structs.
* Add functions to check if a cipher supports variable IV or key size.
* Add the internal implementation of and support for CCM to the PSA multipart
@ -130,8 +130,8 @@ Bugfix
these two.
* Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
not to list other shared libraries they need.
* Fix a bug in mbedtls_gcm_starts() when bits of iv are longer than 2^32.
Fixes #4884.
* Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
exceeds 2^32. Fixes #4884.
* Fix an uninitialized variable warning in test_suite_ssl.function with GCC
version 11.
* Fix the build when no SHA2 module is included. Fixes #4930.
@ -169,15 +169,15 @@ Changes
length will be ignored.
* Indicate in the error returned if the nonce length used with
ChaCha20-Poly1305 is invalid, and not just unsupported.
* The mbedcrypto library includes a new source code module constant_time.c,
containing various functions meant to resist timing side channel attacks.
This module does not have a separate configuration option, and functions
from this module will be included in the build as required. Currently
most of the interface of this module is private and may change at any
time.
* The generated configuration-independent files are now automatically
generated by the CMake build system on Unix-like systems. This is not
yet supported when cross-compiling.
* The mbedcrypto library includes a new source code module constant_time.c,
containing various functions meant to resist timing side channel attacks.
This module does not have a separate configuration option, and functions
from this module will be included in the build as required. Currently
most of the interface of this module is private and may change at any
time.
* The generated configuration-independent files are now automatically
generated by the CMake build system on Unix-like systems. This is not
yet supported when cross-compiling.
= Mbed TLS 3.0.0 branch released 2021-07-07